Books for the UK computer forensic examiner

What computer forensics topic is it that you are looking to find in a book that is UK centred, file systems for example are the same in the UK as the US?

H

"Windows Forensic Analysis", 2/e

Presumably the OP is referring to UK legislation/development of best practice? Feel free to clarify eddie65, thanks.

Jamie

Sorry did not make myself clear, I am looking for books that relate to UK legislation best practice. I appreciate that file systems are the same but I want to be able to relate it to the British Courts - Many Thanks for the replies so far

Wish I could help but I'm not aware of any UK publications which go into the level of detail seen in some US works.

"Forensic Computing A practitioner's guide" (Sammes and Jenkinson) and "Digital Forensics Digital Evidence in Criminal Investigations" (Marshall) give some background but concentrate more on technical matters. An overview of changes in legislation and best practice in the UK would certainly make an interesting dissertation.

Jamie

Jamie/Eddie

I don't mean to be obtuse, well only a little maybe -), but UK legislation is generally about criminal offences and computer forensics is applied to investigations in more or less every type of criminal offence. The other application of UK law is criminal evidence and procedure but that applies to everything not just computer forensics so it is to be found in law books as opposed to computer forensic books. There may be case law which relates to digital evidence but again I'm not sure you will find that in a book on computer forensics. There is a legal forum here so that may be a starting point but there is US legal discussion there as well as UK. There were some good case law references on the UK forensicwiki but that is no longer up. BAILLI is a good free legal resource for cases try R v Ross Warwick Porter.

Best practice is generally about the same whether in the UK, US or any other country, I think we work roughly to the same standards. There is the UK ACPO Guide for best practice but as I say it is not too disimilar to the US one. There is an international ISO/IEC 27037 which is currently in draft going through working group stage, but again that is roughly the same as UK & US best practice.

H

Good points, Harry. BAILLI is a great resource and probably the most useful avenue for eddie65 to go down. I've tried to encourage input here from certain quarters in the UK legal profession but so far without much success -(

Computer forensics can be derived from many sources including failed evidence in criminal cases. Jamie's reference is one good place to start looking and from a practitioner angle keydat (Harlan Carvey) referral to "Windows Forensic Analysis", 2/e is another place you may want to start looking too.

Other sources

Archbold - legal
Blackstones Criminal Practice - legal
Admissibility of computer evidence in criminal proceedings
Laws of the Internet
Computer evidence
Craig Hall on Computer Forensics
Computer Law
etc
etc

Do remember not all computer forensics books have been written for the UK market but still have application to the UK.

Other sources

…
Admissibility of computer evidence in criminal proceedings
Laws of the Internet
Computer evidence
Craig Hall on Computer Forensics
Computer Law

Difficult to see how you could call these "sources",

also presumably Craig Hall is Craig Ball the US lawyer/Computer Forensic Examiner who I doubt writes about UK law the topic the OP is asking about.

H